Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_JwKN-7uGIhHQ-r73lHD42pe30M.cer
File: _JwKN-7uGIhHQ-r73lHD42pe30M.cer (raw, json)
Hash identifier: WVm+GF2nEidhZHTd+xfI9o3tFqeQjNi4EbgItd419/g=
Subject key identifier: FC:9C:0A:37:EE:EE:18:88:47:43:EA:FB:DE:51:C3:E3:6A:5E:DF:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801701510CCF72BFF0FD0A909A6FD13
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a8/168a06-6560-4a59-b84c-eb1561cd8bfe/1/_JwKN-7uGIhHQ-r73lHD42pe30M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a8/168a06-6560-4a59-b84c-eb1561cd8bfe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.226.194.0/24
IP: 2a12:d380::/29
Validation: Failed, certificate revoked on Fri 09 Feb 2024 12:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:70:15:10:cc:f7:2b:ff:0f:d0:a9:09:a6:fd:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc9c0a37eeee18884743eafbde51c3e36a5edf43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d8:1b:19:0f:e1:c3:f4:7d:f1:7d:c0:2d:26:
7e:a0:16:2e:f4:3e:49:76:8f:6c:d3:65:86:d3:fa:
52:c6:36:91:f3:b0:f8:f7:95:e0:47:a4:51:85:4f:
b1:9d:a2:1d:2a:fa:00:88:2f:2a:82:8f:6a:c0:99:
56:1f:c5:2e:0b:ee:ac:b0:64:c9:48:bc:73:d0:47:
67:88:3c:0f:76:03:f0:a9:76:fa:78:03:5c:3e:07:
b0:e4:0a:ae:08:d1:c5:71:a6:c8:8a:7c:9a:77:9c:
f0:47:9f:64:45:a8:7b:d0:9e:e1:fb:bd:d1:0a:4e:
c2:ee:37:9d:6a:fe:d8:c5:71:be:7f:1f:65:b0:52:
38:c1:da:49:a4:2a:74:a5:4f:eb:08:22:87:58:aa:
94:d2:43:b9:e0:2f:6b:04:d4:58:ec:dc:ce:e5:ba:
05:e5:a9:c6:ab:ab:b0:66:e2:16:e5:91:c9:6b:cb:
81:85:c5:fa:89:85:dd:4d:91:31:48:39:57:d5:7a:
6d:48:ab:fb:4e:5c:8b:72:85:b8:8e:ec:e3:a4:4f:
2e:d8:5a:7c:36:07:a6:8f:44:14:8d:f7:ae:99:59:
32:7f:51:9c:97:89:24:80:a8:32:5d:11:c8:68:ae:
ce:a9:20:03:24:38:4e:2d:08:fa:22:ba:c4:0a:e4:
83:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9C:0A:37:EE:EE:18:88:47:43:EA:FB:DE:51:C3:E3:6A:5E:DF:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/168a06-6560-4a59-b84c-eb1561cd8bfe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/168a06-6560-4a59-b84c-eb1561cd8bfe/1/_JwKN-7uGIhHQ-r73lHD42pe30M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.194.0/24
IPv6:
2a12:d380::/29
Signature Algorithm: sha256WithRSAEncryption
35:b7:f5:e6:f1:d0:0e:47:0a:76:f9:95:d6:d8:39:32:4d:ee:
a4:9b:67:b3:f7:aa:9d:04:00:89:f1:71:f5:77:25:9a:55:73:
f4:0e:07:a5:95:1a:1a:38:bb:bb:21:57:41:fa:03:98:96:00:
23:f4:fb:f6:9a:6d:88:a9:3a:a1:06:fe:12:3e:08:a8:71:e0:
73:2a:49:84:d8:08:9c:d1:b7:e3:30:46:17:00:99:9c:e1:aa:
21:fc:e8:a9:62:8a:34:81:4f:e3:4e:a5:b2:05:52:dd:77:c7:
52:98:bb:34:33:b5:72:d4:0b:5e:36:3f:8d:e4:c8:4f:29:88:
1d:9e:d6:04:1b:88:3c:4c:28:a9:1f:1f:d3:fc:a2:56:61:15:
e5:e0:24:ff:c6:87:d7:c1:23:bd:10:e2:04:6e:3d:a9:c0:90:
35:c0:a3:98:32:ab:24:61:21:9d:a3:5f:fc:8b:95:5d:57:b5:
38:95:1d:ad:c1:73:ce:f4:34:9b:85:54:41:49:6e:7c:7d:23:
1d:c1:d6:e0:cb:c3:1c:9b:99:cd:02:70:75:53:5e:3d:e0:bb:
ae:b9:cc:33:a0:a1:c4:fc:ae:53:5e:8f:37:ae:e3:b1:dc:33:
4e:3c:25:df:18:7f:1a:6d:ee:de:77:28:80:7f:1a:23:84:cf:
1c:4f:70:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:36 2024 by rpki-client on console-fra.rpki-client.org